Snort mailing list archives

Problems with Snort and MySql


From: "Mendoza, Luis" <luis.mendoza () attla com>
Date: Tue, 28 Aug 2001 09:12:19 -0500

Hi,

I am new with Mysql and with database in general. I follow recommendations
to work with Snort and Mysql from:

http://www.snort.org/Files/snort-w2k.pdf

But, when I want to run my snort with Mysql, I have the following response:
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
Using LOCAL time
database: compiled support for ( mysql )
database: configured to use mysql
database:          user = snort
database: database name = snort
database:          host = localhost
database:   sensor name = test
database: mysql_error: Can't connect to MySQL server on 'localhost' (10061)

I test my connection to Mysql:

c:\mysql\bin\mysql -u snort snort
and have the following response:
C:\mysql\bin>mysql -u snort snort
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 2 to server version: 3.23.40-nt
Type 'help;' or '\h' for help. Type '\c' to clear the buffer.
mysql>

This indicate that the service and my account work, but cannot work together
with snort.

I use Snort 1.7, the configuration is:
var $HOME_NET 10.1.1.0/24
var external any

preprocessor defrag
preprocessor stream: timeout 10, ports 25 80, maxbytes 16384
preprocessor http_decode: 80

preprocessor portscan: $HOME_NET 4 3 c:\snort\logs\portscan.log
preprocessor portscan-ignorehosts: $DNS_SERVERS

output database: log, mysql, user=snort dbname=snort host=localhost

include snort.rules

The command:

snort -i2 -X -c snort.conf -l c:\snort\logs

Please, send me any help

Best Regards

Luis Mendoza

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: